Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
File:                     VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json)
Hash identifier:          hgmTvbxtGfF41lWDp7x7Oxc+JJw2wzPFHzpndvqWNZw=
Subject key identifier:   38:DB:44:11:D9:30:1A:06:AD:D3:D0:31:B3:33:4D:7D:E2:C3:68:E4
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Certificate issuer:       /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
Manifest number:          0186
Signing time:             Sat 29 Mar 2025 03:05:29 +0000
Manifest this update:     Sat 29 Mar 2025 03:05:28 +0000
Manifest next update:     Sat 05 Apr 2025 03:05:28 +0000
Files and hashes:         1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: wNJcIclvrsdnhQobRMteHrN8xApQYieCEM1ev+FsEBE=)
                          2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91433B3
        Validity
            Not Before: Mar 29 03:05:28 2025 GMT
            Not After : Apr  5 03:05:28 2025 GMT
        Subject: CN=67e76379-22fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:4f:70:48:e1:b4:82:5f:e3:a8:23:5c:95:
                    da:40:3b:50:3c:eb:35:ed:9c:b7:3f:f1:27:e0:b4:
                    ee:af:41:86:db:f6:9a:97:29:f2:1c:30:74:d4:ab:
                    89:08:c6:43:a0:37:67:b4:e8:f9:e7:f8:3f:40:de:
                    c5:02:fc:a5:56:6b:27:23:90:af:5e:a5:4a:7d:10:
                    fd:83:76:ba:56:fd:a6:41:7b:8d:d2:86:f3:1a:a5:
                    ea:d2:81:92:96:f3:51:6c:95:9e:7b:38:59:e8:c4:
                    b4:68:ad:a8:97:ac:65:8d:bf:62:8e:a3:40:b9:5b:
                    6c:0a:4e:2b:f5:00:e9:5b:c0:96:22:3e:bd:09:53:
                    80:f6:9f:49:d7:e5:cd:62:13:54:03:a9:f1:4c:63:
                    bc:9f:db:c6:e6:72:33:cd:8f:b4:25:17:01:b8:37:
                    28:a8:30:dc:ae:7e:fb:ac:86:af:dd:e0:fb:af:67:
                    f9:b2:4d:8a:1f:f0:13:7c:60:d5:e9:51:0e:0f:ab:
                    c1:a2:c3:c0:50:d3:0c:26:0e:01:fc:f5:51:ee:78:
                    a0:66:10:7f:0c:2c:0f:88:75:af:cf:91:22:be:ac:
                    08:9c:e8:cc:d6:e6:10:26:6a:3a:5e:d6:0a:7b:19:
                    cc:73:1b:c7:7e:d4:38:11:ca:9d:12:eb:6b:73:da:
                    85:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DB:44:11:D9:30:1A:06:AD:D3:D0:31:B3:33:4D:7D:E2:C3:68:E4
            X509v3 Authority Key Identifier:
                keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:c0:1b:40:d5:fd:e3:b8:df:85:a8:85:1b:ed:65:18:9a:
         7b:fc:8e:26:bd:6e:c8:af:75:ce:3e:8b:ea:5c:84:3e:5e:e0:
         98:bc:0f:b8:45:db:5e:33:63:64:a8:9c:f6:b0:98:99:16:4a:
         ee:ea:8d:8e:6a:50:2c:54:31:fd:50:f6:49:85:d1:b3:03:88:
         74:98:21:94:e5:56:59:7d:4a:d0:db:ba:40:0c:d3:80:55:75:
         4e:2b:d1:81:3c:a7:f3:22:c8:34:0d:ec:06:45:d8:91:10:cd:
         7c:d9:48:9a:1b:d7:0e:93:45:ae:0c:19:e5:0d:35:25:78:fa:
         8d:a8:a1:d8:e0:d4:27:7d:bb:10:1b:d7:fa:5d:7f:ac:24:7d:
         79:0d:74:aa:83:ae:37:dd:15:01:c4:fe:e0:c5:cb:44:5b:4e:
         12:75:9e:61:c8:78:d5:bd:52:1a:6d:87:c4:13:35:b0:5d:b0:
         0d:54:e2:ff:ec:2b:e8:1d:ac:0a:72:0c:26:79:f8:38:98:d6:
         1a:e1:44:4c:7c:21:a8:5f:e2:78:84:53:c9:f2:e0:17:8d:2b:
         cb:a9:94:4f:98:0f:9c:6b:e3:e1:ef:db:71:fe:d4:e2:7c:ca:
         fd:f3:4c:8f:7f:6f:b4:40:08:db:35:71:f7:25:5b:96:40:f8:
         8a:15:30:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:51:11 2025 by rpki-client